tocsin

Debian/graphite-web: unknown

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a c

Action: Upgrade graphite-web to 0.9.12+debian-1 or later.

Affected

introducedfixedlast affected
00.9.12+debian-1-

Fixed versions

0.9.12+debian-1

Sources

published · modified · JSON